TRANSPARENT & PROTOCOL-SAFE PRICING

The Pre-TAC standard for FortiGate engineers & teams.

Priced attractively for individual engineers out-of-pocket, with bulletproof client-side execution that complies with strict enterprise security protocols and NDAs.

100% Career-Safe Protocol Shield: Runs in local browser memory (WASM) · Zero data egress · Works completely offline.
Basic
Unlimited local config & log scrubbing + 3 instant quick-fix hygiene alerts for individual sysadmins.
€0
Free Forever · Non-Paid
Unlimited browser WASM air-gap parsing
  • Unlimited config & log scrubber (WASM)
  • Zero data egress guarantee (works offline)
  • Save to Account (Opt-In): 1 Device or up to 3 Devices in HA
  • 3 Instant Quick-Fix hygiene alerts
  • Generic TAC baseline .ttl macro
  • Tailored FortiOS-locked .ttl compiler
  • Multi-VDOM automated looping
  • Pre-TAC Readiness Score & Dossier
★ CYBERSECURITY
Specialists / Experts
For Technical Support Engineers & NOC Technicians wanting to progress and close tickets 3x faster.
€49
per month · billed monthly
Billed monthly · Cancel anytime
  • Unlimited tailored .ttl macro compilation
  • Save to Account: Up to 30 Devices (Fixed Period)
  • Version-locked FortiOS syntax (6.4–7.4)
  • Multi-VDOM automated loop iterations
  • Pre-TAC Readiness Score (0–100%)
  • One-click copy FortiCare ticket description
  • Conserve Mode & WAD leak diagnostics
  • 100% Career-Safe: Zero corporate protocol risk
CCIEs / NSE 1–8
Field Consultant
For on-site consultants, CCIEs/NSE8s and change-window lead architects.
€249
per month · billed monthly
or €199/mo billed annually (€2,388/yr)
  • Everything in Specialist, plus:
  • Save to Account: Least Restrictions (Fleet scale, extended retention)
  • Pre/Post change-window delta validation
  • HA pair deep checksum diffing (A/B/C/Hybrid)
  • Multi-snapshot historical config drift engine
  • On-site SFP optical transceiver decay audit
  • Full PSIRT CVE & bug advisory correlation
  • Executive Client Handover RCA PDF exports
Contact Sales
MSP Fleet Hub
For managed service providers and SOC teams managing 50+ customer firewalls.
€1,899
per month · billed monthly
or €1,499/mo billed annually
  • 5 Included team seats with RBAC controls
  • Save to Account: Unrestricted Fleet & Multi-Tenant Folders
  • Multi-tenant client workspace folders
  • White-labeled client post-mortem reports (PDF)
  • REST API token access for automated triage
  • ServiceNow & Jira webhook ticketing sync
  • Fleet-wide patch compliance radar
  • Dedicated Slack / Teams escalation channel
NEED A ONE-OFF PASS FOR AN ACTIVE INCIDENT?

Active Sev-1 Outage right now? Grab a 72-Hour Incident Pass.

No recurring subscription required. Immediate crisis triage for active production incidents. Drop your diagnostic dump or config into the sanitizer to instantly unlock version-locked Tera Term macros, memory telemetry extraction and a structured Pre-TAC dossier for €489.

FEATURE BY FEATURE BREAKDOWN

Comprehensive Tier-to-Tier Matrix

Compare capabilities across Free, Desk Specialist, Field Consultant, MSP Fleet and Air-Gapped Enterprise.

Feature / Capability Community
€9 / mo
Specialists / Experts
€49 / mo
Field Consultant
€249 / mo
MSP Fleet
€1,899 / mo
Air-Gapped Enterprise
Custom
1. Privacy, Execution & Career-Safe Compliance
100% Client-Side In-Browser Execution (WASM)
Zero Data Egress Guarantee (Works Offline / Disconnected)
IPsec PSKs, Passwords & Cert Redaction
Complies with Strict Enterprise NDA & GDPR Handover
Private On-Prem Air-Gapped Docker Appliance Included
Save to Account (Opt-In Vaulting) 1 Device / HA Pair Up to 30 Devices Least Restrictions Least Restrictions On-Prem Local
Device Scope (Standalone vs. HA Cluster) 1 Device or up to 3 Devices in HA Up to 30 Firewalls Fleet-Scale 50+ to 500+ Fleet Unlimited On-Prem
Vault Retention Policy & History Window Active Snapshot Fixed Period (30–90 Days) Extended / Multi-Year Multi-Year / Indefinite Permanent Local
Visitor Level Egress Protection Visitor level is strictly 100% In-Browser RAM (Save to Account disabled; Zero Data Egress).
2. Pre-TAC Compilation & CLI Automation
Generic Baseline TAC Tera Term (.ttl) Script
FortiOS Version-Locked Syntax Compiler (6.4, 7.0, 7.2, 7.4) Unlimited Unlimited Unlimited Unlimited
Multi-VDOM Automated Loop Iterations
Pre-TAC Readiness Score & Ticket Description Generator
Conserve Mode WAD Memory & Softirq Diagnostic Payloads
3. Field Change-Windows & Longitudinal Drift Forensics
Basic Single-Snapshot Syntax Preflight
HA Pair Deep Checksum De-sync Analysis (A/B/C/Hybrid)
Pre vs. Post Change-Window Delta Verification
Longitudinal Conserve Mode Growth Trajectory Curve
SFP Optical Transceiver (dBm) Light Decay Audit
PSIRT CVE & Bug Advisory Correlation Radar
4. Team Collaboration, Multi-Tenancy & Integrations
Included User Seats 1 User 1 User 1 User 5 Seats Custom Seats
TAC-Ready Pre-Flight Dossier Export (PDF/ZIP)
White-Labeled Client Post-Mortem Reports
Multi-Tenant Client Folders & Workspace Isolation
REST API Token Access for Automated CI/CD Triage
SAML 2.0 / SSO & Active Directory Integration
SECTOR DEPLOYMENT ARCHITECTURE

Tier & Procurement Guidance by Sector

From local school districts and clinical medical practices to statewide government backbones and air-gapped utility grids (Power, Water, Gas) — discover which Ferritaas tier and architecture fits your compliance requirements.

Specialist · Fleet

01 · Schools & Universities

K-12 school districts to Tier-1 university campuses. Strict student privacy architecture complying with CIPA, FERPA, and Eduroam without cloud telemetry leakage.

1 HA Pair to 200+ VDOMs CIPA · FERPA 20% Academic PO
Read sector white paper
Specialist · Enterprise

02 · Hospitals & Clinics

Private medical practices to multi-hospital systems. Zero-egress architecture guarantees ePHI never touches external clouds, fulfilling HIPAA, HITECH, and FDA IoMT.

FG-40F to FG-3000F Core HIPAA · HITECH 100% In-RAM
Read sector white paper
Field Pro · Enterprise

03 · State & Municipalities

City halls, county administration, and 911 dispatch centers. 30-day bounded cryptographic offline leases guarantee uninterrupted operations through severed WAN lines.

Mobile 911 & Branch PSAP FBI CJIS 5.9 30-Day Lease
Read sector white paper
Sovereign Appliance

04 · Power, Water & Gas

Electric substations, water treatment facilities, and gas pipelines. 100% sovereign air-gap strictly satisfies NERC-CIP zero-cloud rules and Purdue Level 1–3 SCADA.

FortiGate Rugged (FGR) NERC-CIP-005 · NIS2 Zero Cloud Docker
Read sector white paper